ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories

The cybercrime group xplogs22 has been deploying Xworm malware via phishing in Russia and CIS countries since November 2023, shifting from Formbook and Snake Keylogger to Xworm in mid-2025. Meanwhile, the Toy Ghouls group has used custom GenieLocker ransomware against Russian organizations since March 2026, exploiting trusted network connections for access.